Home / Careers / Security Application Engineer

Security Application Engineer

Description

Metrohm AG is a leading company in instrumental chemical analysis. Our more than 3,000 employees worldwide develop, produce, sell and service high-precision measuring instruments for chemical analyses in the laboratory and in industrial manufacturing processes. We are present in over 100 countries with our own subsidiaries or exclusive agencies.

For more than 15 years, we have consistently relied on agile methods in software development. To strengthen the development of our OMNIS software in an international environment, we are looking for a Security Application Engineer to be based in our facilities of Metrohm DropSens in Asturias.

What this means for you:

Your responsabilities:

As part of our SecDevOps team, you enable the delivery of high-quality, secure software.
You are responsible for integrating and fine-tuning security measures in CI/CD pipelines (e.g., by integrating SAST, DAST, and SCA tools) and for implementing security-relevant core mechanisms in our OMNIS software.
You conduct regular security assessments, including architecture and code reviews as well as threat modeling.
You plan and execute comprehensive penetration tests, vulnerability scans, and fuzzing tests.
You support the triage and prioritization of vulnerabilities.
You contribute to the development of security policies and guidelines (e.g., secure coding principles, security control blueprints).
As a security expert, you share your knowledge with development teams.

Your Profile:

You have a higher education degree or advanced training in Computer Science and are familiar with agile methods and tools.
You have a solid understanding of common vulnerabilities (e.g., OWASP Top 10).
You possess strong knowledge of current security best practices within the software development lifecycle, ensuring security is integrated at every stage.
Your strong .NET skills enable you to read, understand, and identify vulnerabilities in code.
You have practical experience with security testing tools (e.g., Burp Suite, ZAP, etc.).
Security certifications such as CISSP, CSSLP, CASE, CEH, GPEN, GWPT, BSCP, OSCP, OSWE, or similar are an advantage.
You enjoy working in a team, sharing knowledge, and have a strong focus on quality.
You can communicate fluently in Spanish and English.

What we offer:

An exciting work environment in an agile, modern, and well-structured organization, with more than 10 Scrum teams across 3 locations in Europe.
New facilities designed for agile teams, cutting-edge work equipment, and motivated, well-coordinated Scrum teams.
A great work environment and hybrid model.
Flexible schedule (M to Th: 7:00/9:15 – 16:00/18:15; F 7:00/9:15 – 13:15/15:30).
Flexible compensation (restaurants, transport, childcare…).
Health insurance.
Life insurance.